Hi @gcusello , Thanks for quick response below is my SPL query, the concern her was they wanted to see the date format in "%d-%b-%Y" not in "%Y-%b-%d". index="main" | eval txstatus=case(status=200,"Success",status >200 AND status <500,"Business_Fail",status >=500,"System_Fail") | eval success_pass_count = Success + Business_Fail | eval svc_nm=case(match(api_name,"login"),"Login",match(api_name,"Prepaid"),"Prepaid Registration",match(api_name,"Postpaid"),"Postpaid Registration",true(),"unKnown") | bin span=1d _time | stats count as total sum(success_pass_count) as Success_pass_count by svc_nm,_time | eval Success=round((Success_pass_count/total) * 100,2) | eval Date = strftime(_time, "%Y-%b-%d") | eval metric="Response", value=Success, col=Date | xyseries svc_nm,col value | foreach "*-*-*" [ eval <<FIELD>> = if(isnull('<<FIELD>>'), "- ", round('<<FIELD>>',2)) ] |rename svc_nm AS "Service Name"
... View more